Symptoms:
- On Mac OS X Snow Leopard (10.6.x) you are prompted to enter your VPN password even though you’ve previously saved it in the keychain
- You are using IPSec on the built in VPN client on Mac OS X Snow Leopard
Explanation:
This is caused by a problem with the Keychain Access item for the VPN IPSec connection. A two minute fix will sort it out for you.
Solution:
- Launch Keychain Access by clicking Applications > Utilities > Keychain Access
- On the left upper pane, under Keychains select System
- On the left lower, under Category select All Items
- On the right side of the screen scroll to the bottom and locate the two items called VPN(IPSec)
- Double-click the VPN(IPSec) whos kind is IPSec XAuth Password
- Click the Access Control button/tab. The applications permitted to use this keychain item will be displayed below. If you’re prompted for your password, enter it.
- Click the plus (+) sign
- When the Finder window appears, press Cmd + Shift + G on your keyboard
- When the Go To Folder dialog appears, enter /usr/libexec
- Click Go
- When the /usr/libexec folder appears scroll to configd, select it and click Add
- Click Save Changes
- Close Keychain Access and try connecting to your VPN again

Thanks a lot! Works great!
Although you should mentioned that the Item you have to look for in Keychain-Access is only named VPN(IPSec) if you left the network name to the default setting. If you named your connection “SuperSecureVPN” you have to look for “SuperSecureVPN” in your keychain.
Thanks!
Actually for step 9-11 you can just start typing: /usr/libexec/configd
When you hit Enter, configd will be selected.
Thanks so much! Its always been a hassle and annoyance retyping my password multiple times each day! This works great.
Thanks.
I was having the same problem on Lion and this has just fixed it.
Thanks! I have just found this after extensive searching. I’m very grateful for the fix as the need to enter my password each time I connect to VPN has been annoying me for a long time.
This also worked for a fellow who changed his password. The vpn server could not be found thereafter. Following this script got the vpn working again.
Hmm. I looked throughout my Keychain Access and there is no entry for which “Kind” is “IPSec XAuth Password”. There is a “IPSec Shared Secret”, but no “Xauth Password”. Hmmm. And when I look at the permissions for “IPSec Shared Secret”, it shows its access control set to “Allow all applications to access this item”. I am running Lion 10.7.3.
Thanks!